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DETAILED ACTION 

1 . This is in response to the amendment filed on 6 June 2008. 

2. Claims 1-4, 6-38 and 40-46 are pending in the application. 

3. Claims 1-4, 6-38 and 40-46 have been rejected. 

4. Claims 5 and 39 have been cancelled. 

Response to Amendment 

5. The examiner approves of the amendment made to the specification. No new matter has been 
added. 

Response to Arguments 

6. Applicant's arguments with respect to claims 1-4, 6-10 and 19-29 have been considered but 
are moot in view of the new ground(s) of rejection. 

7. Regarding claims 13-18, 30-38 and 40-46, the Applicant's arguments filed 6 June 2008 have 
been fully considered but they are not persuasive. 

On pages 13 and 15, regarding claims 13 and 30, the applicant argues that Slick does not 
teach that the "client will refuse to submit a print job... for a particular user unless a key 
associated with the user has been provided to said client". 

The examiner respectfully disagrees. FIG. 5A is a block diagram which depicts the use 
of encrypted printer public key 67 which was created and stored as depicted in FIG. 4A for 
verifying the authenticity of printer public key 25 prior to using printer public key 25. In FIG. 
5 A, print command 72 is received from the user of computer 10 and preferably includes an 
indication that the desired print data is to be sent to printer 20 in a secure fashion. As seen in 
FIG. 5 A, user- specific public key 53 is accessed, preferably through operating system 40 as 
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discussed above. User-specific public key 53 is provided to decryption algorithm 76 along with 
encrypted printer public key 67 to obtain decrypted printer public key 75. Printer public key 25 is 
retrieved from storage area 62, or if computer 10 is a networked environment as depicted in FIG. 
2, printer public key 25 can be retrieved from fixed disk 31 of server 30. Decrypted printer 
public key 75 and printer public key 25, which was retrieved from storage area 62, are then 
provided to key verification algorithm 77 to verify the authenticity of printer public key 25. If 
key verification algorithm 77 determines that decrypted that printer public key 75 matches 
printer public key 25, then printer public key 25 is authentic and has not been changed or 
corrupted since it was initially obtained from printer 20, or from server 30 as the case may be. If 
there is a mismatch, then printer public key 25 has either been corrupted, or has been modified in 
the case that it is was obtained from server 30 prior to use. Preferably, printer driver 60 generates 
an error message for display on display 1 1 of computer 10 to prompt the user to re-obtain a new, 
authenticated copy of printer public key 25 from printer 20, or from server 30, as the case may 
be. 

On page 16, regarding claim 38, the applicant argues that Slick only teaches the use of 
user-specific keys for securing other keys. The applicant argues that Slick does not teach or 
suggest a system with means for providing a key to a client that is specific to a user of that client 
and is used to encrypt print jobs from that client to a printer. 

The examiner respectfully disagrees. Slick discloses a random key generator 82 is used 
to generate symmetric key 83, which is a cryptographic key that can be used to encrypt and to 
decrypt a data object. Random key generator 82 is preferably a function of operating system 40 
and is accessed by a function call. Print data 85 and symmetric key 83 are then provided to 
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encryption algorithm 65 to generate encrypted print data 87. In this regard, printer 20 will need a 
secure copy of symmetric key 83 to decrypt encrypted print data 87 for printing. Accordingly, 
printer public key 25 and symmetric key 83 are provided to encryption algorithm 65 to generate 
encrypted symmetric key 88. In this manner, the symmetric key can be passed to printer 20 in a 
secure fashion. Encrypted symmetric key 88 is then placed in header 90 of print job 89, which 
also contains encrypted print data 87. Print job 89 is then sent to printer 20 via connection 1. 
Even if print job 89 is intercepted on its way to printer 20, encrypted print data 87 cannot be 
properly decrypted because encrypted symmetric key 88 cannot be decrypted without the use of 
printer private key 23, which is securely stored in printer 20. 

Claim Rejections - 35 USC §102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 2 1(2) of such treaty in the English language. 

8. Claims 13-18, 30-38 and 40-46 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Slick et al U.S. Patent No. 7,305,556 B2. 

As to claim 13, Slick et al discloses a method of controlling a user's ability to cause a 
client to send a print job to a printer [column 6, lines 37-49]. Slick et al discloses the method 
comprising providing the client with a key specifically configured for the user [column 6, lines 
37-49], wherein the client will refuse to submit a print job to the printer for a particular user 
unless the key associated with that user has been provided to the client [column 12, lines 1-23]. 
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As to claim 14, Slick et al discloses the method further comprising: 

generating the key with a print server [column 6 line 50 to column 7 line 

4]; and 

transmitting the key to the client from the print server over a network to 
which the print server, client and printer are all connected [column 6 line 50 to 
column 7 line 4]. 
As to claim 15, Slick et al discloses the method further comprising: 

storing a related key on a storage device of the print server [column 8, 
lines 9-17]. 

As to claims 16 and 33, Slick et al discloses the method further comprising: 

encrypting the print job with the key resulting in an encrypted print job 
[column 6, lines 37-49]; 

sending the encrypted print job from the client to the print server [column 
6, lines 37-49]; and 

attempting to decrypt the encrypted print job with the related key stored on 
the storage device of the print server [column 11, lines 36-53]; 

wherein, if the related key correctly matches the key used to generate the 
encrypted print job, the print server successfully decrypts the encrypted print job 
and causes the printer to print the print job [column 11, lines 36-53]. 
As to claims 17 and 35, Slick et al discloses that the key allows the client to print to 
multiple networked printers managed by the print server [column 6, lines 8-21]. 
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As to claims 18 and 36, Slick et al discloses that the key is provided to multiple clients 
[column 6 line 50 to column 7 line 4]. 

As to claim 30, Slick et al discloses a system for controlling a user's ability to cause a 
client to print a print job to a printer on a network, the system comprising: 
a client [column 9, lines 18-47]; and 

a print server for managing at least one network printer, wherein the print 
server provides a key to the client for use in submitting a print job, the key being 
specific to a particular user of the client [column 9, lines 18-47]; 

wherein the client will refuse to submit a print job for a user unless 

the client has been previously provided with a key specific to that user 

[column 12, lines 1-23]. 
As to claim 31, Slick et al discloses that the print server comprises: 

a configuration utility for configuring the key [column 7, lines 44-61]; and 

a storage device for storing a related key [column 7, lines 44-61]. 
As to claim 32, Slick et al discloses that the print server: 

configures the key specifically for the user with the configuration utility 
[column 7, lines 44-61]; 

stores a related key on the storage device [column 7, lines 44-61]; 

associates the key with a printer driver for the printer [column 7, lines 44- 
61]; and 

installs the key in association with the driver on the client [column 7, lines 

44-61]. 
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As to claim 34, Slick et al discloses that if the related key correctly matches the key used 
to generate the encrypted print job, the print server successfully decrypts the encrypted print job 
and causes the printer to print the print job [column 11, lines 36-53]. 

As to claim 37, Slick et al discloses that the configuration utility is an embedded web 
server that resides on the print server [column 9, lines 18-47]. 

As to claim 38, Slick et al discloses a system controlling use of a printer on a network, 
the system comprising: 

a client connected to the network for generating a print job for the printer 
[column 9, lines 18-47]; 

means for providing a key to the client, wherein the key is specific to a 
user of the client and is used to encrypt a print job from the client to the printer 
[column 9, lines 18-47]; and 

means on the client for encrypting the print job using the key to produce 
an encrypted print job for transmission to the printer. 
As to claim 40, Slick et al discloses decryption means for using a related key to decrypt 
the print job for use by the printer [column 11, lines 36-53]. 

As to claim 41, Slick et al discloses that the decryption means comprise a printer server 
[column 11, lines 36-53]. 

As to claim 42, Slick et al discloses that the key is used by multiple clients on the 
network [column 6, lines 8-21]. 

As to claim 43, Slick et al discloses that the client is configured to use the key to submit 
the print job only at the request of the particular user [column 7, lines 44-61]. 
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As to claim 44, Slick et al discloses that the means for providing a key comprise a print 
server on the network [column 6, lines 8-21]. 

As to claim 45, Slick et al discloses that the printer server further comprises: 

means for storing a related key on a storage device of the print server 
[column 9, lines 18-47]; 

means for associating the key with a printer driver for the printer [column 
9, lines 18-47]; and 

means for installing the key in association with the printer driver on the 
client [column 9, lines 18-47]. 
As to claim 46, Slick et al discloses that the printer server further comprises: 

means for attempting to decrypt the encrypted print job with a related key 
[column 11, lines 36-53]; 

wherein, if the related key correctly matches the key used to 
generate the encrypted print job, the print server successfully decrypts the 
encrypted print job and causes the printer to print the print job [column 11, 
lines 36-53]. 
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Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

9. Claims 1-4, 6-10 and 19-29 rejected under 35 U.S.C. 103(a) as being unpatentable over Slick 
et al U.S. Patent No. 7,305,556 B2 in view of Imbrie et al US 2002/0169002 Al. 

As to claim 1, Slick et al discloses a method of controlling use of a printer on a network, 
the method comprising: 

with a print server, generating a key for a specific client of the print 

server; 

wherein the key is used to submit a print job from the client to a printer on 
the network [column 6, lines 37-49]. 
Slick et al does not teach embedding the key in a printer driver. Slick et al does not teach 
providing the key to the specific client on the network by installing the print driver on the 
specific client. 

Imbrie et al teaches permitting encryption/decryption of data received from the 
intermediate device, a public key can be provided and embedded within the print driver for use 
with a later generated private key to encrypt or decrypt data pockets transmitted from the 
printing assembly 40 [0037]. 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Slick et al so that the key pair would have been 
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embedded in a print driver and the keys would have been provided to the client when the driver 
was installed on the specific client. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Slick et al by the teaching of Imbrie et al because it 
provides a secure manner in which keys are distributed with differing peripheral devices [0007]. 

As to claim 2, Slick et al teaches using the key to encrypt the print job on the client prior 
to transmission of the print job to the printer [column 6, lines 37-49]. 

As to claim 3, Slick et al teaches using the key or a related key to decrypt the print job for 
use by the printer [column 10, lines 16-37]. 

As to claim 4, Slick et al teaches that the key is specific to a particular user, the method 
further comprising using the key to submit the print job from the client device only at the 
request of the particular user [column 9, lines 25-29]. 

As to claim 6, Slick et al teaches the method further comprising: 

storing a related key on a storage device of the print server [column 8, 
lines 9-17]. 

As to claims 7 and 21, Slick et al teaches the method further comprising: 

encrypting the print job with the key resulting in an encrypted print job 

[column 6, lines 37-49]; 

sending the encrypted print job from the client to the print server [column 

6, lines 37-49]; and 

attempting to decrypt the encrypted print job with the related key stored on 

the storage device of the print server [column 11, lines 36-53]; 
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wherein, if the related key correctly matches the key used to 
generate the encrypted print job, the print server successfully decrypts the 
encrypted print job and causes the printer to print the print job [column 11, 
lines 36-53]. 

As to claim 8, Slick et al teaches that installing the driver further comprises re-installing 
the driver with the key on the client if a driver without the key is already installed on the client 
[column 6, lines 22-36]. 

As to claim 9, Slick et al teaches that installing the driver further comprises re- 
configuring the driver on the client with the key if a driver without the key is already installed 
on the client [column 11, lines 16-35]. 

As to claim 10, Slick et al teaches that installing the driver with the key further comprises 
installing the key on the client without installing the driver if a driver configured to use the key 
is already installed on the client [column 6, lines 22-36]. 

As to claims 11 and 23, Slick et al teaches that the key allows the client to print to 
multiple networked printers managed by the print server [column 6, lines 8-21]. 

As to claims 12 and 24, Slick et al teaches that the key is provided to multiple clients 
[column 6 line 50 to column 7 line 4]. 

As to claim 19, Slick et al discloses a system for controlling a client's ability to send a 
print job to a printer on a network, the system comprising: 

at least one client [column 10, lines 59-61]; 

a print server for managing distribution of print jobs to one or more 
printers [column 9, lines 18-47]; and 
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a network connecting the at least one client device, the print server and the 
one or more printers [column 9, lines 18-47]; 

wherein the print server generates a key for a specific client of the 
print server, the printer server then requires the specific client to use the 
key provided to the client when the client is submitting a print job to the 
print server [column 9, lines 18-47]. 
Slick et al does not teach embedding the key in a printer driver. Slick et al does not teach 
providing the key to the specific client on the network by installing the print driver on the 
specific client. 

Imbrie et al teaches permitting encryption/decryption of data received from the 
intermediate device, a public key can be provided and embedded within the print driver for use 
with a later generated private key to encrypt or decrypt data pockets transmitted from the 
printing assembly 40 [0037]. 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Slick et al so that the key pair would have been 
embedded in a print driver and the keys would have been provided to the client when the driver 
was installed on the specific client. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Slick et al by the teaching of Imbrie et al because it 
provides a secure manner in which keys are distributed with differing peripheral devices [0007]. 
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As to claim 20, Slick et al teaches that the print server is configured to: 

generate the key with a utility [column 6 line 50 to column 7 line 4]; and 
store a related key on a storage device [column 6 line 50 to column 7 line 

4]. 

As to claim 22, Slick et al teaches that if the related key correctly matches the key used to 
generate the encrypted print job, the print server successfully decrypts the encrypted print job 
and causes the printer to print the print job [column 12, lines 1-23]. 

As to claim 25, Slick et al teaches that the key allows any user to cause the client to send 
the print job to the print server [column 9, lines 1 8-47]. 

As to claim 26, Slick et al teaches that the at least one client comprises a personal 
computer [column 5, lines 35-45]. 

As to claim 27, Slick et al teaches that the configuration utility is an embedded web 
server that resides on the print server [column 9, lines 18-47]. 

As to claim 28, Slick et al teaches that the storage device is incorporated into the print 
server [column 9, lines 18-47]. 

As to claim 29, Slick et al teaches that the storage device is connected to the network, but 
separate from the print server [column 9, lines 18-47]. 
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Conclusion 

10. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Aravind K. Moorthy whose telephone number is 571-272-3793. 
The examiner can normally be reached on Monday -Friday, 8:00-5:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Aravind K Moorthy/ 
Examiner, Art Unit 2131 
/Ayaz R. Sheikh/ 

Supervisory Patent Examiner, Art Unit 2131 



